CVE-2021-25830

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2021-25830
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-25830.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2021-25830
Published
2021-03-01T16:15:14Z
Modified
2026-10-24T02:46:41Z
Severity
  • 9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

A file extension handling issue was found in [core] module of ONLYOFFICE DocumentServer v4.2.0.236-v5.6.4.13. An attacker must request the conversion of the crafted file from DOCT into DOCX format. Using the chain of two other bugs related to improper string handling, an attacker can achieve remote code execution on DocumentServer.

References

Affected packages

Git / github.com/onlyoffice/core

Affected ranges

Type
GIT
Repo
https://github.com/onlyoffice/core
Events
Introduced
3c73f692d05eb69935f7a0fc8a3835a198ed5b1f
Last Affected
078aa9c5e7f1f6fb50b5ac76104f48a2692d9e7f
Database specific
Show details 
{
    "extracted_events":  [
        {
            "cpe":  "cpe:2.3:a:onlyoffice:document_server:*:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "4.2.0.236"
                },
                {
                    "last_affected":  "5.6.4.13"
                }
            ],
            "source":  "CPE_RANGE"
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-25830.json"